Compliance Monitoring & Auditing Flashcards
7 cards from real CCM practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 7 Compliance Monitoring & Auditing flashcards as text
Which of the following BEST describes 'tone at the top' as it relates to compliance monitoring effectiveness?
Answer: Senior leadership's demonstrated commitment to ethical conduct and compliance, which influences the entire organization's culture
Tone at the top reflects senior leadership's visible commitment to compliance, which shapes organizational culture and employee behavior.
During audit planning, a compliance auditor identifies that a business unit recently implemented a new ERP system. This information should MOST likely:
Answer: Increase audit scrutiny of that business unit due to heightened implementation risk
New system implementations increase risk of control gaps and data migration errors, warranting increased audit attention during the transition period.
A compliance monitoring program identifies a vendor consistently submitting invoices with rounded dollar amounts. This pattern MOST likely warrants investigation for:
Answer: Potential falsification of invoices or fictitious billing
Consistently rounded invoice amounts can indicate fabricated or inflated billing and are a recognized red flag in vendor fraud schemes.
Which element is ESSENTIAL when drafting a compliance audit finding to ensure it is actionable?
Answer: Condition, criteria, cause, and effect
A well-structured finding includes the condition (what was found), criteria (what should be), cause (why it occurred), and effect (the risk or impact).
What is the purpose of a 'compliance attestation' process?
Answer: To require business unit managers to formally confirm compliance with specific policies or regulations for a defined period
Attestations require managers to formally certify their unit's compliance status, creating accountability and documentation for the compliance record.
When evaluating the adequacy of a compliance training program through monitoring, which metric is MOST meaningful?
Answer: Completion rates combined with pre/post assessment score improvements
Combining completion rates with demonstrated knowledge improvement shows whether training is both reaching employees and effectively changing understanding.
A compliance auditor is reviewing a third-party vendor's data handling practices. Which audit right provision is critical to include in vendor contracts?
Answer: Right to audit clause allowing periodic compliance reviews of the vendor
A right to audit clause contractually grants the organization the ability to examine vendor compliance controls and records, which is essential for third-party risk management.